@astrojs/internal-helpers

• 0.11.0

  Aug 31, 2026

  🍿 Minor Changes

  • #17262 f8e9458 Thanks @Princesseuh! - Adds an @astrojs/internal-helpers/mdx entrypoint with the shared helpers the Markdown processor packages use to render .mdx files.
• 0.10.4

  Aug 19, 2026

  🐞 Patch Changes

  • #17701 05763a0 Thanks @matthewp! - Fixes base path stripping to respect path-segment boundaries. With a configured base such as /docs, a request like /docs-archive/page is no longer treated as being under the base, so routing and context.url.pathname now agree on the same pathname.
• 0.10.3

  Aug 18, 2026

  🐞 Patch Changes

  • #17696 8c193f6 Thanks @astrobot-houston! - Fixes incremental build cache invalidation caused by Shiki mutating the langAlias config object when loading languages
• 0.10.2

  Jul 28, 2026

  🐞 Patch Changes

  • #17474 c895b12 Thanks @nicksnyder! - Updates dependency js-yaml to v4.3.0
• 0.10.1

  Jul 2, 2026

  🐞 Patch Changes

  • #17252 eb6f97e Thanks @matthewp! - Fixes trailing-slash handling for request paths that begin with a backslash

    With trailingSlash: 'always', the standalone Node server could append a trailing slash to a request path that begins with a backslash (for example /\example.com/foo) and echo that path back in the Location header of a 301 response. Because browsers resolve a leading \ the same way as /, the resulting Location could point off-site.

    Such paths are now recognized as internal paths, matching the existing handling for paths that begin with //, so they are no longer rewritten with a trailing slash.

• 0.10.0

  May 28, 2026

  🍿 Minor Changes

  • #16848 f732f3c Thanks @Princesseuh! - Adds markdown, frontmatter, and shiki helper modules, shared by Astro’s content pipeline.
• 0.9.1

  May 13, 2026

  🐞 Patch Changes

  • #16544 d365c97 Thanks @matthewp! - Tightens isRemotePath() to reject control characters after a leading slash and fixes the dev image endpoint origin check
• 0.9.0

  Apr 22, 2026

  🍿 Minor Changes

  • #16419 f3485c3 Thanks @matthewp! - Hardens nested object and package metadata lookups to ignore prototype keys in content handling and project scaffolding

  🐞 Patch Changes

  • #16448 99464ed Thanks @matthewp! - Updates vite, picomatch, and unstorage to latest patch versions
• 0.7.6

  Mar 10, 2026

  🐞 Patch Changes

  • #15828 c2cd371 Thanks @Princesseuh! - Fixes glob matching of remote patterns matching more paths than intended in select situations
• 0.8.0

  Mar 10, 2026

  🍿 Minor Changes

  • #15778 4ebc1e3 Thanks @ematipico! - Added a new entry point called /request, which exposes utilities to work with the Request type:

    • getFirstForwardedValue: retrieves the first value of a multi-value header.
    • isValidIpAddress: checks whether a string contains only characters valid in IPv4/IPv6 addresses.
    • getValidatedIpFromHeader: extracts the first value from a header and validates it as an IP address.
    • getClientIpAddress: retrieves and validates the first IP from the x-forwarded-for header.

  • #15077 a164c77 Thanks @matthewp! - Adds normalizePathname() utility function for normalizing URL pathnames to match the canonical form used by route generation.

  • #15419 a18d727 Thanks @ematipico! - Adds a new /cli specifier and the utility NPM_PACKAGE_NAME_REGEX.

  • #15369 240c317 Thanks @florian-lefebvre! - BREAKING CHANGE

    Removes collapseDuplicateSlashes(), startsWithForwardSlash(), startsWithDotDotSlash(), startsWithDotSlash() and isAbsolutePath() from the /path export

  • #15771 745e632 Thanks @rururux! - Adds the new utilities MANY_LEADING_SLASHES and collapseDuplicateLeadingSlashes.

  🐞 Patch Changes

  • #15700 4e7f3e8 Thanks @ocavue! - Adds a fork of createFilter from @rollup/pluginutils without Node.js APIs.

  • #15779 cf6ea6b Thanks @Princesseuh! - Fixes glob matching of remote patterns matching more paths than intended in select situations

• 0.8.0-beta.3

  Mar 6, 2026

  🍿 Minor Changes

  • #15778 4ebc1e3 Thanks @ematipico! - Added a new entry point called /request, which exposes utilities to work with the Request type:
    • getFirstForwardedValue: retrieves the first value of a multi-value header.
    • isValidIpAddress: checks whether a string contains only characters valid in IPv4/IPv6 addresses.
    • getValidatedIpFromHeader: extracts the first value from a header and validates it as an IP address.
    • getClientIpAddress: retrieves and validates the first IP from the x-forwarded-for header.

  🐞 Patch Changes

  • #15700 4e7f3e8 Thanks @ocavue! - Adds a fork of createFilter from @rollup/pluginutils without Node.js APIs.
• 0.8.0-beta.2

  Mar 5, 2026

  🍿 Minor Changes

  • #15771 745e632 Thanks @rururux! - Adds the new utilities MANY_LEADING_SLASHES and collapseDuplicateLeadingSlashes.
• 0.8.0-beta.1

  Feb 9, 2026

  🍿 Minor Changes

  • #15077 a164c77 Thanks @matthewp! - Adds normalizePathname() utility function for normalizing URL pathnames to match the canonical form used by route generation.

  • #15419 a18d727 Thanks @ematipico! - Adds a new /cli specifier and the utility NPM_PACKAGE_NAME_REGEX.

• 0.8.0-beta.0

  Feb 4, 2026

  🍿 Minor Changes

  • #15369 240c317 Thanks @florian-lefebvre! - BREAKING CHANGE

    Removes collapseDuplicateSlashes(), startsWithForwardSlash(), startsWithDotDotSlash(), startsWithDotSlash() and isAbsolutePath() from the /path export

• 0.7.5

  Nov 17, 2025

  🐞 Patch Changes

  • #14791 9e9c528 Thanks @Princesseuh! - Changes the remote protocol checks for images to require explicit authorization in order to use data URIs.

    In order to allow data URIs for remote images, you will need to update your astro.config.mjs file to include the following configuration:

    import { defineConfig } from 'astro/config';
    
    export default defineConfig({
      images: {
        remotePatterns: [
          {
            protocol: 'data',
          },
        ],
      },
    });

  • #14787 0f75f6b Thanks @matthewp! - Fixes wildcard hostname pattern matching to correctly reject hostnames without dots

    Previously, hostnames like localhost or other single-part names would incorrectly match patterns like *.example.com. The wildcard matching logic has been corrected to ensure that only valid subdomains matching the pattern are accepted.

• 0.7.4

  Oct 9, 2025

  🐞 Patch Changes

  • b8ca69b Thanks @ascorbic! - Refactor remote path detection
• 0.7.3

  Sep 22, 2025

  🐞 Patch Changes

  • #14408 1e2499e Thanks @matthewp! - Handle backslash and encoded backslash in isRemotePath
• 0.7.2

  Aug 15, 2025

  🐞 Patch Changes

  • 4d16de7 Thanks @ematipico! - Improves the detection of remote paths in the _image endpoint. Now href parameters that start with // are considered remote paths.
• 0.7.1

  Aug 1, 2025

  🐞 Patch Changes

  • 0567fb7 Thanks @ascorbic! - Adds // to list of internal path prefixes that do not have automated trailing slash handling
• 0.7.0

  Jul 31, 2025

  🍿 Minor Changes

  • #14169 f4e8889 Thanks @ascorbic! - Adds isInternalPath helper